Privacy policy
CutSheetPro is a Shopify app that helps farms sell animals in shares. This page explains what it stores, why, where, and how to get it removed. Last updated 25 August 2026.
Who we are
CutSheetPro is operated by Just A Robot (justarobot.online). Questions about this policy go to support+cutsheet@justarobot.online.
What the app stores, and why
About the store (the farm)
- Your store's domain and an access token Shopify issues so the app can read orders and create draft orders for balance invoices. The token is encrypted at rest.
- Your farm name, reply-to email, and optional outgoing-mail (SMTP) credentials if you connect your own email account. Credentials are encrypted at rest.
- Share products you configure (species, price per pound, deposit), your cut-sheet templates, and your progress through the setup checklist.
About buyers (your customers)
- For each paid share: the buyer's name, email address and phone number from the Shopify order, the order number, what share they bought, and the cut-sheet answers they submit.
- Hanging weight, balance amount, and the status of the share (deposit paid, at processor, ready for pickup, picked up).
Buyer names, emails, phone numbers and cut-sheet answers are encrypted at rest with a key held outside the database. We store this because it is the job: the farm needs the buyer's cut sheet to give to the processor and their contact details to tell them when the meat is ready.
The app does not store card or payment details — payments happen in Shopify checkout and Shopify draft orders. It does not use advertising trackers or analytics cookies on any page.
Who else handles the data
- Shopify — the source of orders and the platform the app runs inside.
- Railway (United States) — hosts the app and its database.
- Cloudflare R2 — holds continuous encrypted backups of the database so a hosting failure doesn't lose a season's orders.
- An email relay — sends the buyer's cut-sheet link, status notices and pickup emails on the farm's behalf, unless the farm has connected its own email account, in which case that account sends them.
No data is sold, shared for advertising, or used to train anything.
Buyers receive transactional email only: their cut-sheet link, status changes on their animal, balance invoices, and pickup notices. CutSheetPro never sends marketing email to buyers. A farm that wants to contact past buyers about a new season does so from its own email account or through Shopify Email, under Shopify's consent rules.
How long it's kept
- While a share is in progress: the buyer's name, email and phone are kept, because the farm still has to reach them about the cut sheet, the balance and pickup.
- 24 months after a share is picked up or cancelled: the buyer's name, email, phone, cut-sheet answers and notes are erased automatically. The anonymous record — animal, share size, weights, amounts, dates — stays so the farm keeps its history.
- Access log: each time buyer details are shown to the farm or exported, the app records the store, the screen and a row count (never the details themselves). These entries are deleted after 12 months.
- When a farm uninstalls: the access token is deleted immediately. Shopify sends a shop-deletion notice 48 hours later and the app then deletes everything it holds for that store — shares, buyers, templates, settings.
- Backups: deleted data ages out of the backup retention window rather than being removed instantly.
Your rights (buyers)
You can ask to see the data held about you, or to have it erased. The simplest route is through the farm you bought from: they request it in Shopify, Shopify forwards it to CutSheetPro, and the app answers the data request or erases your name, email, phone and cut-sheet answers automatically. You can also email support+cutsheet@justarobot.online directly. Erasure keeps the anonymous fact that a share was sold, which the farm needs for its books.
Where GDPR, UK GDPR or CCPA applies to you, these are the access, erasure and portability rights those laws describe; the farm is the controller of its customer data and CutSheetPro is a processor acting on its instructions.
Security
Personal data and credentials are encrypted at rest (AES-256-GCM) with a key kept separately from the database and its backups. Buyer cut-sheet links are long random tokens; the link is the only way to reach that buyer's form, and it locks once the animal goes to the processor. We run a single small system and keep the attack surface accordingly small.
- Who can see buyer data: the farm that sold the share, inside its own Shopify admin. On our side, one operator, and only when a farm asks for help or a data request has to be answered. There is no support team with standing access.
- Accounts: the hosting, code and Shopify Partner accounts behind the app use unique, long passwords from a password manager and two-factor authentication.
- Environments: development runs against its own database with test stores only; production data is never copied into it.
If something goes wrong
If we learn that buyer or farm data has been exposed, lost or accessed without authorization, we will: contain it (revoke credentials, rotate the encryption keys and re-encrypt); work out which stores and buyers are affected; email every affected farm within 72 hours of confirming the incident with what happened, what data was involved and what we did; and notify Shopify as the Partner Program Agreement requires. Farms are responsible for onward notice to their own customers where the law requires it, and we will give them what they need to do that. To report a security concern, email support+cutsheet@justarobot.online.
Changes
If this policy changes in a way that matters, the date at the top moves and installed farms are told by email. The current version always lives at this address.